topic Re: Firepower - command line to show some specifications on the datash in Network Security

Firepower - command line to show some specifications on the datasheet

quang-nv — Thu, 22 May 2025 04:33:59 GMT

Hi everybody,

Our customer would like to see the following information via the firepower device command:

Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B)
Throughput: FW + AVC + Intrusion Prevention System (IPS) (1024B)
Maximum concurrent sessions, with AVC
Maximum new connections per second, with AVC
Transport Layer Security (TLS)
Throughput: NGIPS (1024B)
IPSec VPN throughput
(1024B TCP w/Fastpath)
Maximum VPN Peers

Is there a command that can help display this information. Or how can I verify that these parameters are correct.

Re: Firepower - command line to show some specifications on the datash

Network Diver — Thu, 22 May 2025 05:35:45 GMT

I might be mistaken, but the only way I can think of is to put the device into network, fill it up with data traffic, enable all the inspection features and do monitor the system health over a longer period of time. The most resource intensive feature is probably SSL decryption/encryption.

Sample health monitor dashboard on Firewall Management Center for a Firepower 1120 device in transparent IPS mode.

Also hardware should not be sized that it reaches 100% resource limit during normal operation.

Re: Firepower - command line to show some specifications on the datash

ahollifield — Thu, 22 May 2025 12:13:53 GMT

No. Why not just read the datasheet?

Re: Firepower - command line to show some specifications on the datash

Marvin Rhoads — Thu, 22 May 2025 12:59:54 GMT

There's no such command.

The information is correct and is validated at multiple layers of review within Cisco prior to publication.